461–470 of 670 posts
Earlier quoted context omitted.
I was able to freeze my credit through on-line forms using instructions here: https://www.reddit.com/r/personalfinance/wiki/identity_theft Fees vary by state. I think I paid ~$20 total and not all of them charged me.
Oof. I really don't want to give these incompetent losers my credit card number.
Ok, so credit reporting agency collects sensitive personal and financial data on basically every adult American, loses it to a bunch of criminals and now I have to deal with the consequences? I looked into credit freezes yesterday. This is really a total scam. You have to _call_ each of the three agencies and pay a fee ($5 to $10) each time. If you need to unfreeze your report to make a legitimate credit application…
Corporate charters can be dissolved by the government at any time. Given Equifax ONLY deals in building detailed profiles of every US adult and managed to lose that information to criminals is grounds for terminating their corporation. At this point, their lack of basic security practices has endangered national security by weakening the banking and credit systems. On top of that, this company is massively unpopular.…
I'm as emotionally upset as anyone else, but if in fact this was a zero-day, I also lose the basic lack of security practices argument.
https://qz.com/1073221/the-hackers-who-broke-into-equifax-ex...
Earlier quoted context omitted.
Corporate charters can be dissolved by the government at any time. Given Equifax ONLY deals in building detailed profiles of every US adult and managed to lose that information to criminals is grounds for terminating their corporation. At this point, their lack of basic security practices has endangered national security by weakening the banking and credit systems. On top of that, this company is massively unpopular.…
Confused. Some sources are reporting this was a zero-day vulnerability only recently discovered. I'm as emotionally upset as anyone else, but if in fact this was a zero-day, I also lose the basic lack of security practices argument. https://qz.com/1073221/the-hackers-who-broke-into-equifax-ex...
If you have the most sensitive information for millions of people, maybe don't only worry about perimeter defense?
Earlier quoted context omitted.
Replacement credit cards are not the issue. Whoever has this data has the complete dataset to open new credit cards in your name, buy a car in your name, get plastic surgery in your name, etc. The hassle will be convincing all those companies that you do not in fact owe them thousands, and there is no automatic protections for these types of harms.
Even worse, is if you don't immediately notice a new account on your credit report, that then goes to collections. -_- 10 years later and I still get threatening calls from the shadiest of shady "collection agencies"
Makes me wary of trusting other big OS libraries, but since rebuilding every part of the stack from scratch is infeasible and unproductive, we don't have much choice but to use them.
Technical announcement:
Severe security vulnerability found in Apache Struts using lgtm.com (CVE-2017-9805):
https://lgtm.com/blog/apache_struts_CVE-2017-9805_announceme...
Earlier quoted context omitted.
I think your comment can be easily interpreted as a knee-jerk criticism of American regulatory environment en mass . At best this is a straw-man, and at worse it's a hyperbolic jump to assumptions about the attack vector, existing regulations, and how you believe them to be insufficient. It's too early to know anything for sure about the breach and certainly holding pre-made assumptions prevents a more level headed,…
Finance industry regulation is a joke in the USA. It's largely self monitoring based! http://scholarship.law.cornell.edu/cgi/viewcontent.cgi?artic...
Interestingly, Canada's financial industry is also mostly self-regulated which has always struck me as a foolish model.
Ok, so credit reporting agency collects sensitive personal and financial data on basically every adult American, loses it to a bunch of criminals and now I have to deal with the consequences? I looked into credit freezes yesterday. This is really a total scam. You have to _call_ each of the three agencies and pay a fee ($5 to $10) each time. If you need to unfreeze your report to make a legitimate credit application…
Earlier quoted context omitted.
Confused. Some sources are reporting this was a zero-day vulnerability only recently discovered. I'm as emotionally upset as anyone else, but if in fact this was a zero-day, I also lose the basic lack of security practices argument. https://qz.com/1073221/the-hackers-who-broke-into-equifax-ex...
Even with an 0-day, why was consumer data not encrypted at rest with segmentation for access? If you have the most sensitive information for millions of people, maybe don't only worry about perimeter defense?
Given the number of FS sites running on IBM Websphere and Struts, this may only be the tip of iceberg.